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DETAILED ACTION 
Response to Arguments 

1 . Applicant's arguments filed 5/13/2004 have been fully considered but they are 
not persuasive. 

2. Applicant argues, in regards to claim 1, that Goldschlag (U.S. Patent No. 
6108644) in view of Geer (U.S. Patent No 6212634) does not disclose or suggest a 
certifying authority to digitally sign the blinded certificate and encode security attributes 
of the client device into at least a portion of a key on which the digital signature is 
based. The examiner asserts that Goldschlag discloses a design in column 5, lines 45- 
50 and in figure 1 , in which a first party (client device) sends a blinded certificate to a 
register (certifying authority. Goldschlag also discloses in column 5, lines 56-60 that the 
register (certifying authority) will determine if the data received from the first party (client 
device is valid and if it is the register will then sign the blinded certificate. This 
disclosure by Goldschlag clearly shows a certifying authority used to digitally sign 
blinded certificates. Geer teaches in column 1, lines 8-17 that it is known to have 
certifying authorities generate certificates based upon the public keys of parties 
attempting to become certified or verified. It would have been obvious to one of 
ordinary skill in the art at the time the invention was made to incorporate Geer's 
teachings into Goldschlag's design in order to achieve a design that is capable of 
allowing digital signatures to be based on a portion of a key that corresponds to certain 
aspects of a client. 
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3. Applicant argues, in regards to claims 1 and 18 that Goldschlag includes no 
discussion of how keys are generated. The examiner asserts that none of the claims in 
the present application mention key generation and that the application is evaluated 
solely on the language of the claims. 

4. Applicant argues, in regards to claim 9, that Goldschlag in view of Geer does not 
disclose or suggest selecting, in accordance with public key cryptography, a 
private/pubic key pair that is based at least in part on the attributes of the client. The 
examiner asserts that Geer teaches in column 1, lines 8-10 that it is known to have 
certifying authorities that generate public key certificates that are enciphered with the 
private key of a certifying authority. It would have been obvious to one of ordinary skill 
in the art at the time the invention was made to incorporate Geer's teachings on 
generating public key certificates into Goldschlag's design in order to achieve a design 
that employs public key cryptography and public/private key pairs that can pertain to 
certain attributes of the client. 

5. Applicant argues, in regards to claim 13, that Goldschlag in view of Geer does 
not disclose or suggest a bit pattern that corresponds to the security attributes of the 
client. The examiner asserts that Goldschlag discloses in column 5, lines 51-53, that 
authorization data, such as password and access codes are included in the certificate. 
These passwords and access codes are representative of security attributes associated 
with the client and they would conform to specific bit patterns. 

6. Applicant argues, in regards to claim 18, that Goldschlag in view of Geer does 
not disclose or suggest a signature module to receive electronic information, encoding 
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attributes of the client device into the digital signature by basing the digital signature on 
at least a portion of a key in which attributes are encoded. The examiner asserts that 
Goldschlag discloses a design in column 5, lines 45-50 and in figure 1 , in which a first 
party (client device) sends a blinded certificate to a register (certifying authority. 
Goldschlag also discloses in column 5, lines 56-60 that the register (certifying authority) 
will determine if the data received from the first party (client device is valid and if it is the 
register will then sign the blinded certificate. This disclosure by Goldschlag clearly 
shows a certifying authority used to digitally sign blinded certificates thereby 
representing the claimed signature module. Geer teaches in column 1 , lines 8-17 that it 
is known to have certifying authorities generate certificates based upon the public keys 
of parties attempting to become certified or verified. It would have been obvious to one 
of ordinary skill in the art at the time the invention was made to incorporate Geer's 
teachings into Goldschlag's design in order to achieve a design that is capable of 
allowing digital signatures to be based on a portion of a key that corresponds to certain 
aspects of a client. 

7. Applicant argues, in regards to claim 23, that neither Goldschlag or Geer disclose 
or suggest determining a public key based on a set of claimed security attributes and 
using the public key to verify the digital signature. The examiner asserts that Geer 
teaches in column 1, lines 8-10 that it is know to have certifying authorities that 
generate public key certificates that are enciphered with the private key of the certifying 
authority. It would have been obvious to one of ordinary skill in the art at the time the 
invention was made to incorporate Geer's teachings on the use of public/private key 
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pairs into Goldschlag's design in order to achieve a design that is capable of 
determining a public key that corresponds to the security attributes and using the public 
key to verify the digital signature. 

8. Applicant argues, in regards to claims 27 and 29, that Goldschlag in view of Geer 
does not disclose or suggest repeating the generating, creating, transmitting and 
receiving for additional certificates until an indication of the receipt of a valid certificate. 
The examiner asserts that Geer teaches in column 1 , lines 8-17 that it is known to have 
certifying authorities generate certificates based upon the public keys of the parties 
attempting to become certified or validated. It would have been obvious to one of 
ordinary skill in the art at the time the invention was made to substitute Geer's teachings 
on the use of public keys used in a certification/validation process into Goldschlag's 
design in order to achieve a design that is capable generating new certificates based 
public keys if it is determined that previous certificates were not valid. 

Claim Rejections - 35 USC § 103 

1 . The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 

obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

2. Claims 1-6, 9-14, 18-20, 22-24, 27-36 are rejected under 35 U.S.C. 103(a) as 
being unpatentable over Goldschlag (6108644) in view of Geer (6212634). In regards 
to claim 1, Goldschlag discloses a design in column 5, lines 45-50 and in figure 1, in 
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which a first party (client device) sends a blinded certificate to a registrar (certifying 
authority). Goldschlag then discloses in column 5, lines 56-60, that the registrar 
(certifying authority) will determine if the data received from the first party (client device) 
is valid and if it is then the registrar will sign the blinded certificate. These disclosures 
meet the limitations set forth under claim 1 , which call for having a client device coupled 
to a certifying authority (column 5, lines 45-50 and figure 1 ) so that the client device can 
transmit a blinded certificate to the certifying authority and have it validated and signed 
(see column 5, lines 56-60). However, Goldschlag makes no mention of allowing the 
client to generate a blinded certificate that includes a public key. Geer teaches in 
column 1, lines 8-17, that it is known to have certifying authorities generate certificates 
based upon the public keys of the parties attempting to become certified or verified. It 
would have been obvious to one of ordinary skill in the art at the time the invention was 
made to substitute Geer's teachings on the use of public keys used in a 
certification/validation process into Goldschlag's design in order to achieve a design that 
is capable of allowing a client device to include its public key in a blinded certificate that 
it generates and sends to a certifying authority. 

3. In regards to claim 2, Goldschlag further discloses in column 2, lines 52-58, that 
the first party (client) unblinds the validated (signed) blinded certificate received from the 
second party (certifying authority). This disclosure meets the exact limitations set forth 
under claim 2, which call for the client device (first part in Goldschlag reference) to 
unblind the signed blinded certificate. 
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4. In regards to claim 3, Goldschlag further discloses in column 4, lines 47-56, that 
a vendor is used to provide the first party (client) with goods or services. This meets the 
limitations set forth under claim 3 because the vendor is acting as a content server as 
called for by claim 3 and is capable of delivering electronic content. 

5. In regards to claim 4, Goldschlag discloses in column 4, lines 47-56, that a first 
party (client) sends the unblinded validated (signed) certificate (obtained by the method 
disclosed in the rejection of claim 2) to a vendor (content server), who determines 
whether the certificate is valid and accordingly formulates a response action. This 
meets the limitations set forth under claim 4, which calls for having a client device 
transmit the unblinded signed certificate to the content server, which then determines an 
appropriate response. 

6. In regards to claim 5, Goldschlag further discloses in column 4, lines 48-56, that 
if the validated (signed) unblinded certificate submitted to the vendor (content server) by 
the first party (client) is valid, then a response action is taken such as providing a 
service. This disclosure meets the exact limitations set forth under claim 5. 

7. In regards to claims 9 and 31 , Goldschlag further discloses in column 5, lines 45- 
50 and in figure 1, that a client sends a blinded certificate to a registrar (certifying 
authority). Goldschlag then discloses in column 5, lines 56-60, that the registrar 
(certifying authority) will determine if the data received from the first party (client) is 
valid, and if it is valid then the registrar will sign the blinded certificate to create a newly 
signed blinded certificate. These disclosures meet the first limitations set forth under 
claim 9, which call for receiving a current certificate from a client along with a request to 
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sign a new one (see column 5, lines 45-50 and figure 1 ) and determining whether the 
current certificate received from the client is valid based upon client attributes. 
However, Goldschlag makes no mention of selecting a public/private key pair that is 
based at least in part on the attributes of the client and also signing the new certificate 
with the selected private key. Geer teaches in column 1, lines 8-10, that it is known to 
have certifying authorities that generate public key certificates that are enciphered with 
the private key of the certifying authority. It would have been obvious to one of ordinary 
skill in the art at the time the invention was made to substitute Geer's teachings on the 
use of public/private key pairs into Goldschlag's design in order to achieve a design that 
is capable of having a public/private key pair that is based at least in part on the 
attributes of the client and also signing the new certificate with the private key. 

8. In regards to claims 10 and 32, Goldschlag further discloses in column 5, lines 
51-53, that authorization data such as passwords and access codes are included in the 
certificate. This meets the limitations set forth under claims 10 and because the 
authorization data described above is representative of security attributes of the client 
device. 

9. In regards to claims 1 1 and 33, Goldschlag further discloses in column 5, lines 
59-64, that the registrar (certifying authority) signs the certificate to create a new 
validated blinded certificate. This meets the exact limitations set forth under claims 1 1 
and 33, which calls for the certificate to be blinded. 

10. In regards to claim 12, Goldschlag further discloses in column 5, lines 45-53, the 
use of authorization data that is included in the certificate that is to be signed. This 
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authorized data meets the limitations set forth under claim 12 that call for determining 
additional information that can be encoded in the digital signature. However, 
Goldschlag makes no mention of selecting a public/private key pair based on the 
additional information. Geer teaches in column 1, lines 8-10, that it is known to have 
certifying authorities that generate public key certificates that are enciphered with the 
private key of the certifying authority. It would have been obvious to one of ordinary skill 
in the art at the time the invention was made to substitute Geer's teachings on the use 
of public/private key pairs into Goldschlag's design in order to achieve a design that is 
capable of selecting the public/private key pair based on the attributes of the additional 
information. 

11. In regards to claims 13 and 34, Goldschlag further discloses in column 5, lines 
51-53, that authorization data, such as password and access codes are included in the 
certificate. These passwords and access codes are representative of security attributes 
associated with the client and they would conform to specific bit patterns. This 
disclosure meets the first limitations set forth under claims 13 and 34 that call for 
determining a bit pattern that corresponds to the security attributes of the client. 
However, Goldschlag makes no mention of identifying a public/private key pair that 
corresponds to the bit pattern. Geer teaches in column 1 , lines 8-10, that it is known to 
have certifying authorities that generate public key certificates that are enciphered with 
the private key of the certifying authority. It would have been obvious to one of ordinary 
skill in the art at the time the invention was made to substitute Geer's teachings on the 
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use of public/private key pairs into Goldschlag's design in order to achieve a design that 
is capable of identifying a public/private key pair that corresponds to the bit pattern. 
1- In regards to claim 18, Goldschlag discloses a design in column 5, lines 45-50 
and in figure 1 , in which a first party (client device) sends a blinded certificate to a 
registrar (certifying authority). Goldschlag then discloses in column 5, lines 56-60, that 
the registrar (certifying authority) will determine if the data received from the first party 
(client device) is valid and if it is then the registrar will sign the blinded certificate. These 
disclosures meet the limitations set forth under claim 18, which call for having an 
apparatus to digitally sign and encode electronic information that is received from a 
client including attributes of the client device. Goldschlag further discloses in column 6, 
lines 10-13, that a secure channel is used to communicate information between the user 
(client) and the registrar (certifying authority). This meets the limitations set forth under 
claim 18, which calls for having a connection module to establish a secure connection 
with the client. However, Goldschlag makes no mention of basing the digital signature 
on at least a portion of a key in which the attributes are encoded. Geer teaches in 
column 1, lines 8-17, that it is known to have certifying authorities generate certificates 
based upon the public keys of the parties attempting to become certified or verified. It 
would have been obvious to one of ordinary skill in the art at the time the invention was 
made to substitute Geer's teachings on the use of public keys used in a 
certification/validation process into Goldschlag's design in order to achieve a design that 
bases the digital signature on at least a portion of a key in which the attributes are 
encoded. 
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12. In regards to claim 19, Goldschlag further discloses in column 5, lines 51 -53 that 
authorization data, such as a password and access codes are included in the validated 
(signed) certificate. This meets the limitations set forth under claim 19 because the 
authorization data described above is representative of security attributes of the client 
device. 

13. In regards to claim 20, Goldschlag discloses in column 4, lines 47-56, that a first 
party (client) sends the unblinded validated (signed) certificate (obtained by the method 
disclosed in the rejection of claim 2) to a vendor (certificate archive), who determines 
whether the current certificate is valid and accordingly formulates a response action. 
This meets the limitations set forth under claim 20 that call for having a client device 
transmit the unblinded signed certificate to certificate archive, which then determines an 
appropriate response based on whether or not the current certificate is valid. However, 
Goldschlag makes no mention of using a received public key in order to determine 
whether the current certificate is valid. Geer teaches in column 1 , lines 8-17, that it is 
known to have certifying authorities generate certificates based upon the public keys of 
the parties attempting to become certified or verified. It would have been obvious to 
one of ordinary skill in the art at the time the invention was made to substitute Geer's 
teachings on the use of public keys used in a certification/validation process into 
Goldschlag's design in order to achieve a design that is capable of allowing a certificate 
archive to receive a public key and use it to validate a certificate. 

14. In regards to claim 23, Goldschlag discloses in column 4, lines 48-56, that a 
customer submits a validated (signed) certificate to a third party vendor in order to 
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receive goods or services (such as electronic content). This meets the first limitation set 
forth under claim 23, which calls for receiving a request for electronic content from a 
client. Goldschlag further discloses in the same location as mentioned above that the 
vendor will determine if the client provided certificate is valid and determine whether or 
not to provide the requested goods or services (such as electronic content). This meets 
the limitations set forth under claim 23, which call for checking the digital signature to 
determine its validity and then providing electronic content based on the results of the 
validity check. Goldschlag further discloses in column 5, lines 51-53 that authorization 
data, such as a password and access codes are included in the validated (signed) 
certificate. This meets the limitations set forth under claim 23 that call for having a set 
of security attributes because the authorization data described above is representative 
of security attributes of the client device. However, Goldschlag makes no mention of 
determining a public key based on these security attributes and then using the public 
key to verify the digital signature. Geer teaches in column 1 , lines 8-1 0, that it is known 
to have certifying authorities that generate public key certificates that are enciphered 
with the private key of the certifying authority. It would have been obvious to one of 
ordinary skill in the art at the time the invention was made to substitute Geer's teachings 
on the use of public/private key pairs into Goldschlag's design in order to achieve a 
design that is capable of determining a public key that corresponds to the security 
attributes and using the public key to verify the digital signature. 
15. In regards to claim 22, Goldschlag further discloses in column 4, lines 48-56, that 
if the validated (signed) unblinded certificate submitted to the vendor (content server) by 
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the first party (client) is valid, then a response action is taken such as providing a 
service. This disclosure meets the exact limitations set forth under claim 22. 

16. In regards to claim 24, Goldschlag further discloses in column 5, lines 51-53, that 
authorization data, such as password and access codes are included in the certificate. 
These passwords and access codes are representative of security attributes associated 
with the client and they would conform to specific bit patterns. This disclosure meets 
the limitations set forth under claim 24 that call for determining a bit pattern that 
corresponds to the security attributes of the client. However, Goldschlag makes no 
mention of identifying a public/private key pair that corresponds to the bit pattern. Geer 
teaches in column 1 , lines 8-10, that it is known to have certifying authorities that 
generate public key certificates that are enciphered with the private key of the certifying 
authority. It would have been obvious to one of ordinary skill in the art at the time the 
invention was made to substitute Geer's teachings on the use of public/private key pairs 
into Goldschlag's design in order to achieve a design that is capable of identifying a 
public/private key pair that corresponds to the bit pattern and using the public key to 
verify the digital signature. 

17. In regards to claim 27, Goldschlag discloses in column 4, lines 47-56, that a first 
party (client) sends the unblinded validated (signed) certificate (obtained by the method 
disclosed in the rejection of claim 2) to a vendor (certificate archive), who determines 
whether the current certificate is valid and accordingly formulates a response action. 
This meets the limitations set forth under claim 27 that call for having a client device 
transmit the unblinded signed certificate to certificate archive, which then determines an 
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appropriate response based on whether or not the current certificate is valid. However, 
Goldschlag makes no mention of using a received public key in order to determine 
whether the current certificate is valid. Geer teaches in column 1 , lines 8-1 7, that it is 
known to have certifying authorities generate certificates based upon the public keys of 
the parties attempting to become certified or verified. It would have been obvious to 
one of ordinary skill in the art at the time the invention was made to substitute Geer's 
teachings on the use of public keys used in a certification/validation process into 
Goldschlag's design in order to achieve a design that is capable generating new 
certificates based public keys if it is determined that previous certificates were not valid. 
1 8. In regards to claim 29, Goldschlag discloses in column 4, lines 47-56, that a first 
party (client) sends the unblinded validated (signed) certificate (obtained by the method 
disclosed in the rejection of claim 2) to a vendor (certificate archive), who determines 
whether the current certificate is valid and accordingly formulates a response action. 
This meets the limitations set forth under claim 29 that call for having a client device 
transmit the unblinded signed certificate to certificate archive, which then determines an 
appropriate response based on whether or not the current certificate is valid. However, 
Goldschlag makes no mention of generating public/private key pairs that use public 
keys to generate certificates over and over depending on whether the previous 
certificate was valid or not. Geer teaches in column 1, lines 8-17, that it is known to 
have certifying authorities generate certificates based upon the public keys of the 
parties attempting to become certified or verified. It would have been obvious to one of 
ordinary skill in the art at the time the invention was made to substitute Geer's teachings 
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on the use of public keys used in a certification/validation process into Goldschlag's 
design in order to achieve a design that is capable generating new certificates based 
public keys if it is determined that previous certificates were not valid. 

1 9. In regards to claims 28, and 30, Goldschlag further discloses in column 1 1 , lines 
1-13 that transaction instructions are stored on computer-readable mediums. This 
meets the exact limitations set forth under claims 28, and 30. 

20. In regards to claim 35, Goldschlag discloses in column 4, lines 48-56, that a 
customer submits a validated (signed) certificate to a third party vendor in order to 
receive goods or services (such as electronic content). This meets the first limitation set 
forth under claim 35, which calls for receiving a request for electronic content from a 
client. Goldschlag further discloses in the same location as mentioned above that the 
vendor will determine if the client provided certificate is valid and determine whether or 
not to provide the requested goods or services (such as electronic content). This meets 
the remaining limitations set forth under claim 35, which call for checking the digital 
signature to determine its validity and then providing electronic content based on the 
results of the validity check. 

21 . In regards to claim 36, Goldschlag further discloses in column 5, lines 51-53, that 
authorization data, such as password and access codes are included in the certificate. 
These passwords and access codes are representative of security attributes associated 
with the client and they would conform to specific bit patterns. This disclosure meets 
the limitations set forth under claim 36 that call for determining a bit pattern that 
corresponds to the security attributes of the client. However, Goldschlag makes no 
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mention of identifying a public/private key pair that corresponds to the bit pattern. Geer 
teaches in column 1, lines 8-10, that it is known to have certifying authorities that 
generate public key certificates that are enciphered with the private key of the certifying 
authority. It would have been obvious to one of ordinary skill in the art at the time the 
invention was made to substitute Geer's teachings on the use of public/private key pairs 
into Goldschlag's design in order to achieve a design that is capable of identifying a 
public/private key pair that corresponds to the bit pattern and using the public key to 
verify the digital signature. 

22. Claims 6 and 14 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Goldschlag and Geer as applied to claims 1 and 9 above, and further in view of Chaum 
(4759063). Goldschlag and Geer's design disclosed above meets all of the 
aforementioned limitations of claims 1 and 9 above. However, Goldschlag and Geer's 
design makes no mention of signing the blinded certificate according to the formula: 
(blinded certificate^ mod (n), wherein d represents a private key of the certifying 
authority and n is the product of two prime numbers. Chaum teaches in column 1 , lines 
52-64, that the function f(x) = x e mod (n) can be used to apply a secure digital signature 
because it is almost impossible to compute d (representative of the key) from n (product 
of twp primes) without knowing the prime factors that were involved in computing n. It 
would have been obvious to one of ordinary skill in the art at the time the invention was 
made to substitute Chaum's teachings on applying secure digital signatures into 
Goldschlag and Geer's design in order to achieve a design that is capable of signing the 
blinded certificate according to the formula (blinded certificate^ mod (n). 
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Allowable Subject Matter 

23. Claim 37 is objected to as being dependent upon a rejected base claim, but 
would be allowable if rewritten in independent form including all of the limitations of the 
base claim and any intervening claims. 

24. Claims 7-8, 15-16, and 25 are allowed. 

Conclusion 

25. THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the mailing date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Joseph McArdle whose telephone number is (703) 305- 
7515. The examiner can normally be reached on Weekdays from 8:00 am - 5:00pm. 
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If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gilberto Barron can be reached on (703) 305-1830. The fax phone number 
for the organization where this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). A 



Joseph McArdle 
Examiner 
Art Unit 2132 
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